12715 matches found
PT-2025-14069 · WordPress · Wp Wham Sku Generator For Woocommerce
Name of the Vulnerable Software and Affected Versions: WP Wham SKU Generator for WooCommerce versions 1.6.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables...
PT-2025-14137 · Unknown · Wpopal Opal Portfolio
Name of the Vulnerable Software and Affected Versions: wpopal Opal Portfolio versions 1.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...
PT-2025-14425 · WordPress · Wpfactory Advanced Woocommerce Product Sales Reporting
Name of the Vulnerable Software and Affected Versions: WPFactory Advanced WooCommerce Product Sales Reporting versions 3.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...
PT-2025-14434 · Unknown · Product Enquiry For Woocommerce
Name of the Vulnerable Software and Affected Versions: Ni WooCommerce Product Enquiry versions 4.1.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For Ni WooCommerce...
PT-2025-14428 · Unknown · Vimal Kava Ai Search Bar
Name of the Vulnerable Software and Affected Versions: Vimal Kava AI Search Bar versions n/a through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS in the AI Search Bar...
PT-2025-14122 · Unknown · Digitalcourt Marketer Addons
Name of the Vulnerable Software and Affected Versions: DigitalCourt Marketer Addons versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...
PT-2025-14022 · Valmet · Valmet Dna
Name of the Vulnerable Software and Affected Versions: Valmet DNA versions prior to C2023 Description: The issue concerns an insecure DCOM configuration in Valmet DNA, specifically with the DCOM object Valmet DNA Engineering. This object has permissions that allow it to run commands as a user wit...
PT-2025-14187 · Unknown · Gutena Kit – Gutenberg Blocks/Templates
Name of the Vulnerable Software and Affected Versions: Gutena Kit – Gutenberg Blocks and Templates versions n/a through 2.0.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...
Security update for opera (important)
openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2025:0111-1 Rating: important References: Cross-References: CVE-2025-2783 Affected Products: openSUSE Leap 15.6:NonFree An update that fixes one vulnerability is now available. Description: This update for opera fixe...
CVE-2025-24237
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to cause unexpected system termination...
CVE-2025-24209
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may lead to an unexpected process crash...
CVE-2025-24192
A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data...
CVE-2025-24213
This issue was addressed with improved handling of floats. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A type confusion issue could lead to memory corruption...
CVE-2025-24213
A type confusion issue in the WebKit engine (including webkitgtk4 and webkit2gtk ) can lead to memory corruption . The root cause is attributed to improved handling of floats . This vulnerability specifically affects ARM architectures ; systems running on x86_64 or x86 (with SSE2 enabled) are not...
CVE-2025-24209
A buffer overflow vulnerability exists in the WebKit web engine, specifically affecting WebKitGTK and other products including Safari , iOS , iPadOS , macOS Sequoia , tvOS , and watchOS . The root cause is identified as a failure to check the size of input data when copying buffers , which can be...
CVE-2025-30439
The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An attacker with physical access to a locked device may be able to view sensitive user information...
CVE-2025-30425
This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. A malicious website may be able to track users in Safari private browsing mode...
CVE-2025-31123
CVE-2025-31123 — Zitadel (open-source identity infrastructure) : A vulnerability exists where Zitadel fails to properly check the expiration date of the JWT key when used for Authorization Grants. An attacker with an expired key can obtain valid access tokens, while the JWT Profile for OAuth 2.0 ...
CVE-2025-30368 Zulip allows the deletion of organization by administrators of a different organization
Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricted to organization administrators, but its handler failed to check that the field belongs to the same organization as the user. Therefore, an administrator of any organization wa...